Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1776FCED30511EFA714386E762E951A.roa
File: C1776FCED30511EFA714386E762E951A.roa (raw, json)
Hash identifier: BMGSH2mJA2RDT7Ucjb6NnF4LsI7sHOZlsKjRlx9AgOc=
Subject key identifier: 97:01:E3:92:D4:8D:07:A1:9C:70:7C:FA:94:20:16:6E:D6:70:5A:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01080D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1776FCED30511EFA714386E762E951A.roa
Signing time: Wed 15 Jan 2025 05:58:35 +0000
ROA not before: Wed 15 Jan 2025 05:58:31 +0000
ROA not after: Mon 03 Jan 2028 05:58:31 +0000
asID: 17561
IP address blocks: 156.254.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67597 (0x1080d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 05:58:31 2025 GMT
Not After : Jan 3 05:58:31 2028 GMT
Subject: CN=67874e8a-f151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:73:90:24:ec:58:56:82:94:cf:a6:eb:f1:
65:5a:08:9d:b8:8e:a8:91:0d:fc:52:c6:f3:d7:47:
df:58:c1:81:a9:43:72:b0:37:9d:9d:06:5e:1a:17:
9f:de:b1:ec:f8:1e:e3:76:16:a5:85:aa:3c:07:80:
aa:b2:20:72:d8:71:3e:b2:12:87:22:13:1f:36:c0:
04:62:0f:50:e1:52:3d:e3:f5:05:d8:53:87:f6:66:
70:30:4c:b7:b7:40:ee:73:d2:d1:60:1f:4b:b7:f4:
ce:6d:d1:8d:9d:93:ee:61:58:c9:eb:02:32:09:a4:
06:2b:9a:5d:4a:cb:1e:c0:79:ec:f5:a0:45:c9:fd:
08:68:82:71:87:e4:85:6b:69:32:62:8e:2d:f3:e3:
62:ba:c6:cd:46:46:72:0f:d0:b0:24:d3:f5:57:7f:
81:4f:17:8b:ea:ea:24:5d:ed:f0:3f:1c:4f:3f:e2:
af:40:76:ce:0c:70:9e:a0:97:6b:56:68:26:11:3e:
5e:29:b3:08:1a:16:13:d1:4f:20:4d:ef:d7:54:99:
a8:7a:02:c8:66:6f:88:af:c3:cb:cc:38:f9:74:19:
c0:35:fa:1b:c0:8b:dc:ba:1c:28:49:9c:2c:38:37:
44:30:43:05:cc:97:14:fc:6b:8f:d5:87:e8:c0:49:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:01:E3:92:D4:8D:07:A1:9C:70:7C:FA:94:20:16:6E:D6:70:5A:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1776FCED30511EFA714386E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.49.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:fb:0b:88:5a:73:25:a3:1a:dd:ce:70:22:47:d7:fa:e5:00:
24:3e:77:b3:1e:41:31:e3:54:4a:b0:07:6f:39:35:bb:d5:d1:
a1:43:0f:0b:53:77:fb:19:a8:32:8e:d4:09:6c:2a:71:64:f5:
f7:18:08:6b:f3:a5:d0:e5:e3:bb:ec:28:ab:25:7d:f8:9f:f1:
02:a5:4a:42:57:94:28:28:63:8e:0d:6c:1c:76:42:7d:7b:6f:
75:4e:ff:19:fd:94:a0:6b:63:2e:ae:ef:12:83:12:77:f1:b8:
d6:51:20:da:eb:eb:df:08:64:e9:d5:aa:9e:41:34:25:80:82:
f5:9f:4f:98:61:63:62:c5:25:59:6d:0c:79:e1:d3:39:a6:ce:
27:5e:a9:20:05:c3:11:43:05:8e:49:43:fe:fc:8b:be:d6:ab:
86:9b:2c:45:e1:07:5c:12:75:f5:81:fc:80:63:be:97:14:77:
77:d7:bd:7c:7e:6d:0c:58:c5:c7:4f:5a:88:9a:15:41:83:b9:
63:91:e7:7d:e9:0e:35:f2:26:c3:96:a5:80:59:77:7f:ef:68:
a6:19:4d:7f:7f:b2:21:93:fb:01:d7:ae:45:41:5d:40:d3:ac:
71:06:ab:bb:11:e5:65:7d:54:d9:55:a7:86:83:14:14:0e:60:
0d:13:5a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:17 2025 by rpki-client